“The Cyber Arms Race” – Spies, Hackers & Nicole Perloth of the NY Times (Part 1)

Market Evolution

The zero-day market has evolved into a clandestine and lucrative industry, where secrecy is paramount. Nicole Perloth explains that the market's first rule is silence, as revealing vulnerabilities could expose unlocked windows for hackers and governments alike 1. Initially, companies like idefense paid hackers small sums to identify system vulnerabilities, but the stakes quickly escalated. Defense contractors and intelligence agencies began offering substantial sums for these zero-days, leading to a market driven by espionage and cyber warfare 1. Perloth notes that this market has become a global phenomenon, with countries like Saudi Arabia and the UAE heavily investing in zero-days to monitor and control their populations 2.

   

Key Players

The major players in the zero-day market include brokers, hackers, and governments, each with distinct roles and motivations. Perloth highlights that brokers facilitate transactions between hackers and governments, often selling vulnerabilities to the highest bidder 2. She shares an example of a broker, referred to as Jimmy Sabian, who supplied zero-days to U.S. intelligence agencies post-9/11, revealing a lack of coordination among agencies that led to inflated costs 3. This market's expansion has seen hundreds of defense contractors globally, with governments like the U.S. and Israel using these tools for cyber operations, such as the infamous attack on an Iranian nuclear facility 3.